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Descriptive Title of Invention: HTTP Cookie Proxy 



Name of Project: Universal Session Manager 



Product Name or Number: Total-e-Mobile 




Was a description of the invention published, or are you planning to publish? If so. the date(s) and pubiication(s): 



REDACT 



Was a product including the invention announced, offered for sale, sold, or is such activity proposed? If so, the date(s) and location(s): 



REDACT 



Was the invention disclosed to anyone outside of HP, or will such disclosure occur? If so, the date(s) and name(s): 
REDACT 



If any of the above situations will occur within 3 months, call your IP attorney or the legaf Department no* at 1*98-4919 or 970-898-4919. 
Was the invention described in a lab book or other record? If so, please identify (lab book #, etc.) 
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Was the invention built or tested? if so, the date: 
Yes, it was built in REDACT 



i and released in the Total-e-Mobile 1 .0 product in REDACT 



Was this invention made under a government contract? If so, the agency and contract number: 

REDACT — 

Description of Invention : Please preserve ail records of the invention and attach additionai pages for the following. Each additional page should 
be siqned and dated by the inventor(s) and witness(es). 

A. Description of the construction and operation of the invention (include appropriate schematic, block, & timing d.agrams; drawings; samples; 
graphs; flowcharts; computer listings; test results; etc.) 

B. Advantages of the invention over what has been done before. 

C Problems solved by the invention. . 
D*. Prior solutions and the ir disadvantages (if available, attach copies of produ ct literature, technical articles, patents, etc.). 

— — T r~™ i -*__t i / \ .:* W^AlAenrQ r\n fhie Hate* \ DC 
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Date of Signature 
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Inventor's Full Name 
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Greeted as (nickname, middle name, etc) Citizenship 

United Stales of America 
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Description of Invention: Please preserve all records of the invention and attach additional pages for the Mowing. Each additional page should 

be signed and dated by the inventor(s) and v/itne$s(es). . 

A: Description of the construction and operation of the invention (include appropriate schematic, block, & timing diagrams; drawings; samples; 
graphs; flowcharts; computer listings; test results; etc.) 

The HTTP Cookie Proxy is a component that is housed inside of the Universal Session Manager product which sits between a remote client 
device and a web server. The Universal Session Manager and its internal HTTP Cookie Proxy component is currently implemented as a 
customized listener that plugs into the HP Bluestone Universal Listener Framework (ULF). The algorithm is as follows: 
T) Accept HTTP requests from the client device (e.g., a WAP phone) 

2) Extracts a unique client identifier from that HTTP request that uniquely identifies the remote client. 

3) Adds any cookies belonging to that client to the request via an HTTP cookie header. 

4) Forwards the request (with the new HTTP cookie headers) to a web server. 

5) When the web server returns the HTTP response, the component will parse that response and extract all HTTP set-cookie headers. If any 
set-cookie headers are found, those cookies are stored in a cookie storage area for later retrieval when the client submits future HTTP requests 
(i.e. used in step 3). 

6) The HTTP Cookie Proxy passes the response unaltered back to the client. 

Other than adding cookie headers to the forwarded HTTP request, no other modifications are made to the request and, no modifications are 
performed on the web server's HTTP response. By default, the cookies are stored in-proeess; that is to say, they are stored in the same Java 
Virtual Machine memory space as the HTTP Cookie Proxy. It is conceivable that you might want to store this cookie information in persistent 
storage (like a file system or database) for better fault tolerance. The HTTP Cookie Proxy has, therefore, been designed to allow for an 
implementation that does these things to plug in seamlessly. 
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FIGURE A shows, an example of how the Universal Session Manager (which houses the HTTP Cookie Proxy components) could be used to 
facilitate; requests between a WAP phone and an HP Bluestone Universal Business Server (UBS) application. 
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FIGURE B illustrates the Request Scenario - that is, the flow diagram that indicates how an HTTP request from a client device flows through 
the HTTP Cookie Proxy to its final destination, that being a web server or application server; 
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FIGURE C. 




FIGURE C illustrates the Response Scenario - that is, the flow diagram that indicates how an HTTP response from a web or application server 
flows through the HTTP Cookie Proxy back to its requestor, that being a remote client device. 



B. Advantages of the invention over what has been done before. 

Without using this HTTP Cookie Proxy, some client devices cannot maintain state information and thus could not access certain web and/or 
application servers. The advantage to using this component is that now a device which previously had been unable to effectively use certain 
web and application servers can now do so without failure. Another advantage is that the HTTP Cookie Proxy can be added to an application 
deployment without the application developer or the client device knowing that it is involved in the interaction between client and server. 
Therefore, it can be added to an existing or future application deployment without requiring additional coding effort to be expended. It snaps in 
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seamlessly and invisibly to the client and server programs. 



C, Problems solved by the invention. 

Some client devices do not have the capability to store HTTP cookies. This can lead to problems since some web and Application Servers pass 
cookies to clients in order to maintain session and state information between requests - without the ability to store cookies on a per-client basis, 
state and session information cannot be maintained across multiple requests from the same client. The HTTP Cookie Proxy works around this 
problem by providing a mechanism by which the cookie information is no longer required to be stored in the client device. 



D. Prior solutions and their disadvantages (if available, attach copies of product literature, technical articles, patents, etc.). 

A prior solution would be to force the web/application server developer to encode the cookie information in the returned anchor and form action 
URLs. The disadvantage to this is that it requires additional work on the application developer to specifically code their applications to do this 
additional, specialized handling for the specific devices that cannot handle cookies. Another disadvantage is that the URLs themselves may 
grow too long in length, depending on how the cookie information is encoded on the URL. Some devices may not or can not display or accept 
URL strings longer than a certain length. If that length is exceeded, the client will again be rendered useless with respect to its ability to interact 
with the web or application server. 
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